Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLKm3E-CsO0zY9V0BbtIYlkhJG0.roa
File: SLKm3E-CsO0zY9V0BbtIYlkhJG0.roa (raw, json)
Hash identifier: 4byj3jrfG45MsLXiDFWe82GBquk2rHd6x7yyaqfJH0A=
Subject key identifier: 48:B2:A6:DC:4F:82:B0:ED:33:63:D5:74:05:BB:48:62:59:21:24:6D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019977127C013782FC539CBF8EEA1CFBF73E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLKm3E-CsO0zY9V0BbtIYlkhJG0.roa
Signing time: Tue 23 Sep 2025 14:55:24 +0000
ROA not before: Tue 23 Sep 2025 14:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212057
IP address blocks: 2a10:ccc0:8860::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:12:7c:01:37:82:fc:53:9c:bf:8e:ea:1c:fb:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 23 14:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b2a6dc4f82b0ed3363d57405bb48625921246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:67:03:42:28:7e:ad:6c:da:32:16:ed:17:
a8:4f:b2:e5:31:14:e1:45:d4:b0:97:02:4b:73:a5:
c9:d5:4c:db:4a:55:dd:af:b7:f6:51:52:b8:34:a0:
85:87:a3:70:7d:e1:80:a5:31:e2:22:7c:9e:32:32:
29:3c:04:b1:72:62:4d:2a:e1:82:7d:72:86:b9:db:
63:bf:c8:bc:af:fd:26:8b:95:f9:37:36:02:c4:f6:
bf:48:73:e1:9d:46:6c:1b:97:d2:91:ee:64:73:c0:
ac:22:28:b7:26:86:14:44:1a:3b:8d:b2:df:96:95:
07:63:18:2e:2a:3d:03:23:9c:a5:1c:d1:89:40:2c:
41:c5:76:4b:56:41:f5:7a:e8:8c:16:26:ee:68:ac:
ac:65:52:da:19:9f:dc:9d:93:62:06:8d:cd:87:e6:
5a:6a:3e:8b:02:c6:53:19:7f:2a:2c:f7:e3:3f:0f:
b9:79:f6:98:16:e8:ea:29:5a:57:b3:04:d3:39:37:
43:82:c5:c6:25:68:05:0b:16:da:42:de:23:5f:29:
37:2d:f1:33:db:9a:e8:d7:86:fe:8d:4b:7f:e1:cf:
ab:d8:ee:40:3c:be:d4:42:b9:59:af:c8:b3:d0:2f:
0e:15:14:e6:13:14:39:48:74:f7:1c:0b:13:f2:fd:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:A6:DC:4F:82:B0:ED:33:63:D5:74:05:BB:48:62:59:21:24:6D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLKm3E-CsO0zY9V0BbtIYlkhJG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:8860::/44
Signature Algorithm: sha256WithRSAEncryption
54:bd:b8:65:d9:20:72:a5:2c:30:78:ae:2f:73:a6:ff:f3:fe:
40:c5:3a:f4:9a:4e:45:81:53:d4:d5:33:b9:5a:95:f6:11:f3:
55:3b:7e:9f:55:9c:67:78:f8:ec:95:72:54:56:96:f2:8c:d8:
93:4a:f5:a2:53:f1:55:1a:9a:8b:26:01:18:1c:c0:46:29:aa:
e9:b3:bd:08:d9:d4:eb:69:31:80:09:11:fd:95:11:30:80:fe:
28:65:ba:71:5a:7d:67:b6:ab:4a:50:60:1d:18:25:71:33:3a:
c2:c0:76:05:b9:2a:3b:40:7e:c6:6f:d7:c0:c0:e0:84:aa:7d:
6c:f7:3f:25:9c:3d:03:e4:10:f9:22:7d:25:39:05:b5:58:cb:
c0:90:5c:c1:7f:07:d7:22:2c:a8:a8:58:83:fc:d7:d4:10:b5:
bc:71:b5:75:2f:dd:dd:b8:2e:a2:ac:62:13:e2:05:c9:3d:7c:
80:83:03:3a:cf:a2:be:55:1f:f5:22:13:67:9f:f3:88:15:7f:
f5:99:cd:dc:90:f8:ad:fa:a8:cb:e8:44:17:1e:4e:e2:c7:b4:
4c:d9:f9:44:02:89:ef:d2:ed:91:a0:9e:79:79:23:32:d8:c5:
e3:de:1d:66:77:be:20:78:05:3b:66:6a:43:84:2e:95:9b:39:
b6:a8:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:12 2025 by rpki-client